How a mistakenly published password exposed Mercedes-Benz source code

Mercedes-Benz inadvertently published an employee's GitHub authentication token in a public repository, which could have allowed unrestricted access to its internal GitHub Enterprise Server and hosted repositories. Security researchers found evidence the exposed repositories contained source code, Azure and AWS keys, a Postgres database and other sensitive internal information; Mercedes revoked the token and removed the public repo after disclosure, but the company has not confirmed whether any unauthorized access occurred.